Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e20313338383437.roa
File:                     3130332e3234372e31362e302f32342d3234203d3e20313338383437.roa (raw, json)
Hash identifier:          i4p2xXb/gsFzxqdTfkxA/Z3sY5AiFWvSMgA4git3NTM=
Subject key identifier:   BA:38:FE:11:6F:0E:02:2D:5F:82:62:78:49:2C:D3:A2:F9:9E:E8:E9
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       3E9E79D97320108C45D98E5EFF75A372CDDCC5F7
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e20313338383437.roa
Signing time:             Sun 12 Dec 2021 05:45:46 +0000
ROA not before:           Sun 12 Dec 2021 05:40:46 +0000
ROA not after:            Mon 12 Dec 2022 05:45:46 +0000
asID:                     138847
IP address blocks:        103.247.16.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9e:79:d9:73:20:10:8c:45:d9:8e:5e:ff:75:a3:72:cd:dc:c5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Dec 12 05:40:46 2021 GMT
            Not After : Dec 12 05:45:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:a5:37:57:d7:77:a6:ea:a8:8e:8d:54:d5:
                    a7:36:f6:88:a5:d2:d8:10:a3:8f:e6:31:40:91:50:
                    28:d9:27:9d:1e:9e:ed:80:86:30:59:6d:16:fc:91:
                    99:85:7d:c9:bb:1e:31:79:2a:51:d8:e8:20:83:2c:
                    08:f8:21:d6:c4:2a:fd:ed:73:21:57:25:b4:0b:80:
                    85:04:19:64:32:f2:7d:d3:7f:18:a3:ce:c3:0c:1c:
                    d6:08:36:55:14:c6:ec:65:f9:fc:c1:93:26:0e:ef:
                    ae:68:af:40:51:7c:64:34:a3:2a:8a:51:2a:9f:88:
                    86:4c:79:b1:50:f5:5b:7c:7c:47:66:57:7f:58:e1:
                    c4:75:b8:57:17:ab:d5:15:c6:b5:8e:55:ce:b3:3b:
                    14:ea:a5:1f:94:47:74:03:08:fa:01:48:c6:ea:f7:
                    58:26:e1:70:a2:2e:41:63:90:1c:67:a3:77:d4:68:
                    42:f2:5f:e7:5c:14:0a:0c:c1:94:13:e5:b0:5d:b4:
                    52:86:2d:2e:7b:a1:0c:de:5c:71:ed:86:61:df:d8:
                    66:bd:cf:52:17:c9:8f:f1:6e:e3:0f:4c:8b:d5:dd:
                    9a:89:48:31:e8:a7:1f:34:04:29:36:a2:a2:6b:1c:
                    30:0d:55:2d:32:9e:0f:2c:0e:1f:90:32:dc:09:38:
                    19:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:38:FE:11:6F:0E:02:2D:5F:82:62:78:49:2C:D3:A2:F9:9E:E8:E9
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32342d3234203d3e20313338383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:0e:c9:a1:ec:9a:2d:1c:6f:c8:5e:05:ad:1b:f9:30:ce:70:
         8d:3d:74:c5:5f:50:ff:43:32:f2:ba:f6:6d:df:57:e2:ce:3b:
         f6:d1:d0:64:b7:7b:04:28:ff:cf:4a:2f:5f:e6:8c:71:1a:05:
         2a:dd:8f:0a:4a:6c:a0:bd:93:e5:f0:7a:62:6a:71:5e:bc:b4:
         a6:55:cc:f8:91:ba:5e:f2:f0:d5:2f:e5:e7:e3:78:b2:9c:4e:
         31:13:fa:52:41:d6:d9:66:bc:47:c5:b0:4e:93:9c:4d:8f:15:
         1d:e4:b7:0a:90:1c:5d:cf:fb:42:a1:ce:2d:ea:2c:32:94:9a:
         0d:95:43:7e:a5:e0:ad:01:cc:ea:ac:5a:6f:28:3c:00:4e:bc:
         0e:ec:49:9f:0c:df:77:d1:b6:6d:7f:b1:25:e4:fd:85:6d:9f:
         c1:a6:19:eb:bb:70:f5:ef:d5:6d:26:a0:29:1f:22:fa:7f:dd:
         03:ff:18:dd:90:1d:ff:66:c1:59:a4:26:cd:1c:f5:71:71:1d:
         e6:ea:08:db:92:fc:3a:67:3d:44:81:66:1b:39:fd:02:68:5c:
         46:d6:a7:2c:d1:ad:40:ca:06:4e:21:97:5d:b4:c4:7f:64:b9:
         df:7d:54:71:f4:ae:b6:e2:70:b0:5e:2f:f8:a5:d8:3f:ad:fd:
         9f:3d:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org